[dev-v2.10] fleet 105.0.0+up0.11.0-beta.2 update (#4643)

Co-authored-by: fleet-bot <fleet@suse.de>

charts/fleet-agent/105.0.0+up0.11.0-beta.2/Chart.yaml

@@ -8,8 +8,8 @@ annotations:
   catalog.cattle.io/rancher-version: '>= 2.9.0-0 < 2.10.0-0'
   catalog.cattle.io/release-name: fleet-agent
 apiVersion: v2
-appVersion: 0.11.0-beta.1
+appVersion: 0.11.0-beta.2
 description: Fleet Agent - GitOps at Scale
 icon: https://charts.rancher.io/assets/logos/fleet.svg
 name: fleet-agent
-version: 105.0.0+up0.11.0-beta.1
+version: 105.0.0+up0.11.0-beta.2

charts/fleet-agent/105.0.0+up0.11.0-beta.2/values.yaml

@@ -1,7 +1,7 @@
 image:
   os: "windows,linux"
   repository: rancher/fleet-agent
-  tag: v0.11.0-beta.1
+  tag: v0.11.0-beta.2
 
 # The public URL of the Kubernetes API server running the Fleet Controller must be set here
 # Example: https://example.com:6443

charts/fleet-crd/105.0.0+up0.11.0-beta.2/Chart.yaml

@@ -6,8 +6,8 @@ annotations:
   catalog.cattle.io/permits-os: linux,windows
   catalog.cattle.io/release-name: fleet-crd
 apiVersion: v2
-appVersion: 0.11.0-beta.1
+appVersion: 0.11.0-beta.2
 description: Fleet CustomResourceDefinitions
 icon: https://charts.rancher.io/assets/logos/fleet.svg
 name: fleet-crd
-version: 105.0.0+up0.11.0-beta.1
+version: 105.0.0+up0.11.0-beta.2

charts/fleet/105.0.0+up0.11.0-beta.1/templates/job_cleanup_gitrepojobs.yaml

@@ -1,41 +0,0 @@
-{{- if .Values.migrations.gitrepoJobsCleanup }}
----
-apiVersion: batch/v1
-kind: Job
-metadata:
-  name: fleet-cleanup-gitrepo-jobs
-  annotations:
-    "helm.sh/hook": post-install, post-upgrade
-    "helm.sh/hook-delete-policy": hook-succeeded, before-hook-creation
-spec:
-  template:
-    metadata:
-      labels:
-        app: fleet-job
-    spec:
-      serviceAccountName: gitjob
-      restartPolicy: Never
-      securityContext:
-        runAsNonRoot: true
-        runAsGroup: 1000
-        runAsUser: 1000
-      containers:
-      - name: cleanup
-        image: "{{ template "system_default_registry" . }}{{.Values.image.repository}}:{{.Values.image.tag}}"
-        imagePullPolicy: {{ .Values.global.imagePullPolicy }}
-        securityContext:
-          allowPrivilegeEscalation: false
-          capabilities:
-            drop:
-            - ALL
-          readOnlyRootFilesystem: false
-          privileged: false
-        command:
-        - fleet
-        args:
-        - cleanup
-        - gitjob
-      nodeSelector: {{ include "linux-node-selector" . | nindent 8 }}
-      tolerations: {{ include "linux-node-tolerations" . | nindent 8 }}
-  backoffLimit: 1
-{{- end }}

charts/fleet/105.0.0+up0.11.0-beta.2/Chart.yaml

@@ -11,8 +11,8 @@ annotations:
   catalog.cattle.io/rancher-version: '>= 2.9.0-0 < 2.10.0-0'
   catalog.cattle.io/release-name: fleet
 apiVersion: v2
-appVersion: 0.11.0-beta.1
+appVersion: 0.11.0-beta.2
 description: Fleet Controller - GitOps at Scale
 icon: https://charts.rancher.io/assets/logos/fleet.svg
 name: fleet
-version: 105.0.0+up0.11.0-beta.1
+version: 105.0.0+up0.11.0-beta.2

charts/fleet/105.0.0+up0.11.0-beta.2/templates/deployment.yaml

@@ -45,14 +45,6 @@ spec:
         - name: NO_PROXY
           value: {{ $.Values.noProxy }}
         {{- end }}
-        {{- if $.Values.cpuPprof }}
-        - name: FLEET_CPU_PPROF_DIR
-          value: /tmp/pprof/
-        {{- end }}
-        {{- if $.Values.cpuPprof }}
-        - name: FLEET_CPU_PPROF_PERIOD
-          value: {{ quote $.Values.cpuPprof.period }}
-        {{- end }}
         {{- if $.Values.leaderElection.leaseDuration }}
         - name: CATTLE_ELECTION_LEASE_DURATION
           value: {{$.Values.leaderElection.leaseDuration}}
@@ -101,7 +93,8 @@ spec:
         - --debug
         - --debug-level
         - {{ quote $.Values.debugLevel }}
-        {{- else }}
+        {{- end }}
+        {{- if not $.Values.disableSecurityContext }}
         securityContext:
           allowPrivilegeEscalation: false
           readOnlyRootFilesystem: true
@@ -113,10 +106,6 @@ spec:
         volumeMounts:
           - mountPath: /tmp
             name: tmp
-        {{- if $.Values.cpuPprof }}
-          - mountPath: /tmp/pprof
-            name: pprof
-        {{- end }}
       {{- if not $shard.id }} # Only deploy cleanup and agent management through sharding-less deployment
       - env:
         - name: NAMESPACE
@@ -161,7 +150,8 @@ spec:
         - --debug
         - --debug-level
         - {{ quote $.Values.debugLevel }}
-        {{- else }}
+        {{- end }}
+        {{- if not $.Values.disableSecurityContext }}
         securityContext:
           allowPrivilegeEscalation: false
           readOnlyRootFilesystem: true
@@ -206,7 +196,8 @@ spec:
         - --debug
         - --debug-level
         - {{ quote $.Values.debugLevel }}
-        {{- else }}
+        {{- end }}
+        {{- if not $.Values.disableSecurityContext }}
         securityContext:
           allowPrivilegeEscalation: false
           readOnlyRootFilesystem: true
@@ -219,9 +210,6 @@ spec:
       volumes:
         - name: tmp
           emptyDir: {}
-      {{- if $.Values.cpuPprof }}
-        - name: pprof {{ toYaml $.Values.cpuPprof.volumeConfiguration | nindent 10 }}
-      {{- end }}
 
       serviceAccountName: fleet-controller
       nodeSelector: {{ include "linux-node-selector" $shard.id | nindent 8 }}
@@ -241,7 +229,7 @@ spec:
       priorityClassName: "{{$.Values.priorityClassName}}"
       {{- end }}
 
-{{- if not $.Values.debug }}
+{{- if not $.Values.disableSecurityContext }}
       securityContext:
         runAsNonRoot: true
         runAsUser: 1000

charts/fleet/105.0.0+up0.11.0-beta.2/templates/deployment_gitjob.yaml

@@ -93,7 +93,8 @@ spec:
           {{- if $.Values.debug }}
             - name: CATTLE_DEV_MODE
               value: "true"
-          {{- else }}
+          {{- end }}
+          {{- if not $.Values.disableSecurityContext }}
           securityContext:
             allowPrivilegeEscalation: false
             readOnlyRootFilesystem: true
@@ -122,7 +123,7 @@ spec:
       priorityClassName: "{{$.Values.priorityClassName}}"
       {{- end }}
 
-{{- if not $.Values.debug }}
+{{- if not $.Values.disableSecurityContext }}
       securityContext:
         runAsNonRoot: true
         runAsUser: 1000

charts/fleet/105.0.0+up0.11.0-beta.2/templates/job_cleanup_gitrepojobs.yaml

@@ -0,0 +1,44 @@
+{{- if .Values.migrations.gitrepoJobsCleanup }}
+---
+apiVersion: batch/v1
+kind: CronJob
+metadata:
+  name: fleet-cleanup-gitrepo-jobs
+spec:
+  schedule: "@daily"
+  concurrencyPolicy: Forbid
+  successfulJobsHistoryLimit: 0
+  failedJobsHistoryLimit: 1
+  jobTemplate:
+    spec:
+      template:
+        metadata:
+          labels:
+            app: fleet-job
+        spec:
+          serviceAccountName: gitjob
+          restartPolicy: Never
+          securityContext:
+            runAsNonRoot: true
+            runAsGroup: 1000
+            runAsUser: 1000
+          containers:
+          - name: cleanup
+            image: "{{ template "system_default_registry" . }}{{.Values.image.repository}}:{{.Values.image.tag}}"
+            imagePullPolicy: {{ .Values.global.imagePullPolicy }}
+            securityContext:
+              allowPrivilegeEscalation: false
+              capabilities:
+                drop:
+                - ALL
+              readOnlyRootFilesystem: false
+              privileged: false
+            command:
+            - fleet
+            args:
+            - cleanup
+            - gitjob
+          nodeSelector: {{ include "linux-node-selector" . | nindent 12 }}
+          tolerations: {{ include "linux-node-tolerations" . | nindent 12 }}
+      backoffLimit: 1
+{{- end }}

charts/fleet/105.0.0+up0.11.0-beta.2/values.yaml

@@ -1,11 +1,11 @@
 image:
   repository: rancher/fleet
-  tag: v0.11.0-beta.1
+  tag: v0.11.0-beta.2
   imagePullPolicy: IfNotPresent
 
 agentImage:
   repository: rancher/fleet-agent
-  tag: v0.11.0-beta.1
+  tag: v0.11.0-beta.2
   imagePullPolicy: IfNotPresent
 
 # For cluster registration the public URL of the Kubernetes API server must be set here
@@ -84,15 +84,7 @@ metrics:
 debug: false
 debugLevel: 0
 propagateDebugSettingsToAgents: true
-
-## Optional CPU pprof configuration. Profiles are collected continuously and saved every period
-## Any valid volume configuration can be provided, the example below uses hostPath
-# cpuPprof:
-#   period: "60s"
-#   volumeConfiguration:
-#     hostPath:
-#       path: /tmp/pprof
-#       type: DirectoryOrCreate
+disableSecurityContext: false
 
 migrations:
   clusterRegistrationCleanup: true

index.yaml

@@ -741,15 +741,15 @@ entries:
       catalog.cattle.io/rancher-version: '>= 2.9.0-0 < 2.10.0-0'
       catalog.cattle.io/release-name: fleet
     apiVersion: v2
-    appVersion: 0.11.0-beta.1
-    created: "2024-10-22T16:00:39.233225308+02:00"
+    appVersion: 0.11.0-beta.2
+    created: "2024-10-24T10:35:28.706717563Z"
     description: Fleet Controller - GitOps at Scale
-    digest: ddccf369b399c8d35c2a7252c0c4ddd6dea7e34510ccda304d40350accc31cc6
+    digest: 939797315724dfe858665704d8117a88787a321ffacf2cb4894ee7f9c1c87375
     icon: https://charts.rancher.io/assets/logos/fleet.svg
     name: fleet
     urls:
-    - assets/fleet/fleet-105.0.0+up0.11.0-beta.1.tgz
-    version: 105.0.0+up0.11.0-beta.1
+    - assets/fleet/fleet-105.0.0+up0.11.0-beta.2.tgz
+    version: 105.0.0+up0.11.0-beta.2
   - annotations:
       catalog.cattle.io/auto-install: fleet-crd=match
       catalog.cattle.io/certified: rancher
@@ -1199,15 +1199,15 @@ entries:
       catalog.cattle.io/rancher-version: '>= 2.9.0-0 < 2.10.0-0'
       catalog.cattle.io/release-name: fleet-agent
     apiVersion: v2
-    appVersion: 0.11.0-beta.1
-    created: "2024-10-22T16:00:40.758728422+02:00"
+    appVersion: 0.11.0-beta.2
+    created: "2024-10-24T10:35:30.509172741Z"
     description: Fleet Agent - GitOps at Scale
-    digest: 4b9ed18fa21a35a6b1d6c8afe08a32b2d05c358705a179df106dff81ae1a504e
+    digest: 68476c9a09302b13619bb6f19aa8d5436d1bb6ac3c1a38b4f00e9a9bf237e417
     icon: https://charts.rancher.io/assets/logos/fleet.svg
     name: fleet-agent
     urls:
-    - assets/fleet-agent/fleet-agent-105.0.0+up0.11.0-beta.1.tgz
-    version: 105.0.0+up0.11.0-beta.1
+    - assets/fleet-agent/fleet-agent-105.0.0+up0.11.0-beta.2.tgz
+    version: 105.0.0+up0.11.0-beta.2
   - annotations:
       catalog.cattle.io/certified: rancher
       catalog.cattle.io/hidden: "true"
@@ -1540,15 +1540,15 @@ entries:
       catalog.cattle.io/permits-os: linux,windows
       catalog.cattle.io/release-name: fleet-crd
     apiVersion: v2
-    appVersion: 0.11.0-beta.1
-    created: "2024-10-22T16:00:43.065607888+02:00"
+    appVersion: 0.11.0-beta.2
+    created: "2024-10-24T10:35:32.262326974Z"
     description: Fleet CustomResourceDefinitions
-    digest: 8f74f23d5eacd55d07e31fffd92dbefe0cd20bd14fc9a4c28ca24339a9b9f88c
+    digest: 9f21c14920efad164765b994ba081b2477228d329917a3edd8c1f95c2da528bc
     icon: https://charts.rancher.io/assets/logos/fleet.svg
     name: fleet-crd
     urls:
-    - assets/fleet-crd/fleet-crd-105.0.0+up0.11.0-beta.1.tgz
-    version: 105.0.0+up0.11.0-beta.1
+    - assets/fleet-crd/fleet-crd-105.0.0+up0.11.0-beta.2.tgz
+    version: 105.0.0+up0.11.0-beta.2
   - annotations:
       catalog.cattle.io/certified: rancher
       catalog.cattle.io/hidden: "true"

packages/fleet/fleet-agent/generated-changes/patch/Chart.yaml.patch

@@ -11,4 +11,4 @@
 +  catalog.cattle.io/rancher-version: '>= 2.9.0-0 < 2.10.0-0'
    catalog.cattle.io/release-name: fleet-agent
  apiVersion: v2
- appVersion: 0.11.0-beta.1
+ appVersion: 0.11.0-beta.2

packages/fleet/fleet-agent/package.yaml

@@ -1,2 +1,2 @@
-url: https://github.com/rancher/fleet/releases/download/v0.11.0-beta.1/fleet-agent-0.11.0-beta.1.tgz
+url: https://github.com/rancher/fleet/releases/download/v0.11.0-beta.2/fleet-agent-0.11.0-beta.2.tgz
 version: 105.0.0

packages/fleet/fleet-crd/package.yaml

@@ -1,2 +1,2 @@
-url: https://github.com/rancher/fleet/releases/download/v0.11.0-beta.1/fleet-crd-0.11.0-beta.1.tgz
+url: https://github.com/rancher/fleet/releases/download/v0.11.0-beta.2/fleet-crd-0.11.0-beta.2.tgz
 version: 105.0.0

packages/fleet/fleet/generated-changes/patch/Chart.yaml.patch

@@ -12,4 +12,4 @@
 +  catalog.cattle.io/rancher-version: '>= 2.9.0-0 < 2.10.0-0'
    catalog.cattle.io/release-name: fleet
  apiVersion: v2
- appVersion: 0.11.0-beta.1
+ appVersion: 0.11.0-beta.2

packages/fleet/fleet/package.yaml

@@ -1,2 +1,2 @@
-url: https://github.com/rancher/fleet/releases/download/v0.11.0-beta.1/fleet-0.11.0-beta.1.tgz
+url: https://github.com/rancher/fleet/releases/download/v0.11.0-beta.2/fleet-0.11.0-beta.2.tgz
 version: 105.0.0

release.yaml

@@ -15,11 +15,11 @@ rancher-cis-benchmark-crd:
   - 6.2.0
   - 7.0.0-rc.2
 fleet:
-  - 105.0.0+up0.11.0-beta.1
+  - 105.0.0+up0.11.0-beta.2
 fleet-agent:
-  - 105.0.0+up0.11.0-beta.1
+  - 105.0.0+up0.11.0-beta.2
 fleet-crd:
-  - 105.0.0+up0.11.0-beta.1
+  - 105.0.0+up0.11.0-beta.2
 prometheus-federator:
   - 105.0.0-rc.1+up0.4.3-rc.1
 rancher-aks-operator: